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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Box Patent Application 

Assistant Commissioner for Patents 

Washington, D.C. 20231 

NEW AITLICATION TRANSMITFAL 

TransmlUed herewith for filing is the patent application of 
Invenlor(s): Jussi RUUTU, Jian MA 

WAPNINQ: 37 C.F,R § h41(a)(1) points out: 

"(a) A patent is applied for in tfw name or nanyes of the actual inventor or Inventors, 

"(1) The inventorship of a nonprovisionaf application is that inventorship set forth in the oath or 
dedaration as prescribed by § 1.63, except as provided for in § 1, 53(d)(4) and § 1.63(d). If an 
oath or dedaration as prescribed by § 1.63 is not filed during the pendency of a nonprvvisional 
appiication, the inventorship is that inventorship set forth in the application papers filed pursuant 
to § 1.53(b), unless a petition under this paragraph accompanied by the fee set forth In § h17(t) 
is Tiled supplying or changing the name or names of the inventor or inventors. ' 

For (title): A METHOD FOR OPTIMIZING OF DATA TRANSMISSION 



CERTIFtCATION UNDCR 37 C.F.R. | 1.10* 
(Bxprens Malt labef number l» mmntimiory.) 
(Bxpre^M Mail cerUffcaUon i» optional.) 

1 hereby certify thai this New Apptlcation TransmillaJ and the documents referred to as attached therein are being 

deposited wKh the UnHod Stales Postal Service on this dale Oprpmhpr 7, 1999 . in an enveiope 

as "Express Mail Post Office to Addressee/ mailing Label Number £1,0671447 18U$ , ad- 
dressed lo the: Assistant Commissioner for Patents, Washington^ D.C. 20231. 

Elaine Mian 



{type or print name of person mailing paper) 




S^ynaturv of person mailing p«p#r 



Certificaie of mailing (first dass) or facsimile transmission procedures of 37 C.F.R § 1.8 cannot bo 
LTsed to obtain a date of mailing or transmission for this comespondence. 

Each paper or fee ftted by "Express Mail" must fiave the number of the 'Express Mair mailing label 
placed thereon prior to mailing. 37 C.F.R 5 1-1 0(b). 

"Since the filing of correspondence under § 1.10 without the Express Mail mailing label thereon 
is an ovwsight tf w( can be avoided by the exerdse of reasonable care, requests for waiver of this 
requirement will not be granted on petition. " Notice of Oct. 24, 1996, 60 Fed. f^. 56,439, at 56,442. 
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WARNING: 
*WAnNINO: 



1. Type of Application 

This new applicalion is for a(n) 

(check one applicable item below) 

SX Originai (nonprovisional) 

□ Design 
□ Plant 

WARNING: Do not use this transmitta! (or a completion in the U.S. of an tntemationa! Application under 35 
C/.S.C. § 37t{c){4), unless the International Application is txing filed as a divisional, continuation 
or continuation-in-part application, 

WARNING: Do not use this transmittal for the filing of a provisional application, 

NO TB: If one of the following 3 items apply, then complete and attach ADDED PAGES FOR NEW APPLICATION 
TRANSMITTAL WHERE BENEFIT OF A PRIOR U.S, APPLICATION CLAIMED and a NOTIFICATION 
IN PARENT APPLICATION OF THE FILING OF THIS CONTINUATION APPLICATION, 

□ Divisional, 

□ Continuation. 

□ Continuation-in-part (C-l-P). 

2. Benefit of Prior U.S. Applicatlon(s) (35 U.S.C. §§ 119(e), 120, or 121) 

NOTE: A nonprovisional application may claim an Invention disclosed in one or more prior filed copending 
nonprovisional applications or copending international applications designating the United States of 
America, In order for a nonprovisional application to claim the benefit of a prior filed copending 
nonprovisional application or copending international application designating the United States of 
America, each prior application must name as an inventor at least one inventor named in the later ftled 
nonprovisional application and disclose the named inventor's invention claimed In at least one claim 
of the later filed nonprovisional application in the manner provided by the first paragraph of 35 U,S.C. 
§ 112. Each prior application must also be: 

ft) An international application entitled to a fifing date in accordance with PCT Article 1 1 and 
designating the United States of America; or 

fti) Complete as set forth in § 1,5 1(b); or 

(iii) Entitled to a filing date as set forth in § 1.53(b) or § 1.53(d) and include the fcas/c filing fee set 
forth in § 1, 16; or 

fiv) Entitled to a filing date as set forth in § 1.53(b) and have paid therein the pn>cessing and retention 
fee set forth in § 1,21(1) within the time period set forth in § 1.53(0^ 

37 C.F.R. § U78(a)(1). 

NOTE: If the new application t>eing transmitted is a divisional, continuation or a continuation-in-part of a parent 
case, or where the parent case is an International Application which designated the U.S., or benefit 
of a prior provisional application is claimed, then check the following item and complete and attach 
ADDED PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFIT OF PRIOR U.S, APPLICA- 
TION(S) CLAIMED. 

WARNING: If an application claims the t?enefit of the filing date of an eariier filed application under 35 U.S.C. 

§§ 120, 121 or 365(c}, the 20-year term of that application will be based upon the filing date of 
the eariiest U.S. application that the application makes reference to under 35 U.S.C. §§ 120, 121 
or 365(c), (35 U.S.C, § 154(a)(2) does not take into account, for the determination of the patent 
term, any application on which priority is dalnwd under 35 U.S.C. §§ 119, 365(a) or 365(b).) For 
a c-i-p application, applicant should review whether any claim in the patent that will issue is 
supported by an eariier application and, if not, the applicant should consider canceling the refemnce 
to the eariier ftled application. The term of a patent is not based on a clafm-by-clafm approach. 
See Notice of April U, 1995, 60 Fed. Reg. 20,195, at 20,205. 
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WARNiNQ: When the last day of pendency of a provisional application falls on a SatunJey, Sunday, or Federal 
holiday within the District of Columbia, any nonprovislonal application claiming benefit of the 
provisional application must be filed prior to the Saturday, Sunday, or Federaf holiday within the 
District of Columbia. See 37 C,F,H, § 1.78(a)(3), 

□ The new appiicalion being transmitled claims the benefit of prior U.S. applica- 
tion{s). Enclosed are ADDED PAGES FOR NEW APPLICATION TRANSMITTAL 
WHERE BENEFIT OF PRIOR U.S. APPUGATION(S) CLAIMED. 

3. Papers Enclosed 

A. Required for filing date under 37 C.F.R. § 1.53(b) (Regular) or 37 C.F.R. § 1.153 
(Design) Appiicalion 

^3 Pages of specificallon 

Pages of claims 

5 Sheets of drawing 

WARNING: DO NOT submit original drawings. A high quality copy of the drawings should be supplied when 
filing a patent application. Jlye drawings that are submitted to the Office must be on strong, white, 
smooth, and non-shiny paper and meet the standards according to § 1,64, If corrections to the 
drawings are necessary, tlwy sfiould be made to tfye original drawing and a high-quality copy of 
the connected original drawing then submitted to the Office, Only one copy is required or desired. 
For comments on proposed then-new 37 C.F.R. § 1.B4, see Notice of March 9, 1968 (1990 O.G. 
57-62;. 

NOW: 'Identifying Indicia, if provided, siwuid Include the application number or the title of the invention, 
inventor*s name, docket number (if any), and the name and telephone number of a person to call if 
the Office is unable to match tiw drawings to the proper application. This Information should be placed 
on the bacf< of each sheet of drawing a minimum distance of 1.5 cm. (5/6 Inch) down from the top 
of page , . 37 C.F.R. § 1.84(c)). 

(compfeie the following, If applicable) 

□ The enclosed drawing(s) are photograph(s). and there Is also attached a 
^'PETITION TO ACCEPT PHOTOGRAPH(S) AS DRAWING(S)/ 37 C.F.R. 
§ 1.84(b). 

□ fonnal 

□ Informal 

B. Other Papers Enclosed 

Pages of declaration and power of attorney 

-i Pages of abstract 

Other 

4. Additional papors onclosed ' 

□ Amendment to claims 

□ Cancel in this applications claims before 

calculating the filing fee. (At least one original Independent claim must be 
retained for filing purposes.) 

□ Add the claims shown on the attached amendment, (Claims added have 
been numbered consecutively following the highest numbered original 
claims.) 

□ Preliminary Amendment 

[3 Infonnation Disclosure Statement (37 C.F.R. § 1.98) 

13 Fonri PTO-1449 (PTO/SB/08A and 08B) 

tZI Citations 
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□ Declaration of Biological Deposit 

□ Submission of "Sequence Listing.*' computer readable copy and/or amendment 
pertaining thereto for biotechnology Invention containing nucleotide and/or 
amino acid sequence. 

□ Authorization of Attomey(s) to Accept and Follow instructions from Representa- 
tive 

□ Special Comments 

□ Other 

5. Declaration or oath (Including power of attorney) 

NOTE: A newly execuiod dectamtion is not fBquired in a continuation or divisional application provided that 
the prior nonpmvisionai application contained a decfaraiion as mquired, the appiication being filed is 
by aft or fewer than ail the inventors named in the prior appiication, there is no new matter in the 
appiication being ftled, and a copy of the executed declaration filed in the poor application (showing 
the signature or an indication thereon that it was signed) is suttmitted. The copy must be accompanied 
by a statement requesting deletion of the names of person(s) who are not inventors of the appiication 
being filed. If the declaration in the prior application was filed under § 1,47, then a copy of that 
declaration must be ftled accompanied by a copy of the decision granting §1,47 status or, if a nonsigning 
person under §1,47 has subsequentty Joined in a prior application, then a copy of the subsequently 
executed declaration must be ftled. See 37 C,F,R, §§ 1,e3(d)(iy-Qh 

NOTE: A declaration filed to complete an application must be executed, idenUfy the spedftcation to which it 
Is directed, identify each inventor by full name including family name ar\d at least one given name, without 
abbreviation together with any other given name or initial, and the residence, post office address and 
country or dtizenship of each inventor, and state wfwther the inventor is a sole or Joint inventor, 37 
C.ER, § h63iBX1H^). 

El Enclosed 
Executed by 

(check all applicable boxes) 

S inventor{s), 

□ legal representative of inventor(s). 
37 C.F.R. §§ 1.42 or 1.43. 

□ joint inventor or person showing a proprietary 
interest on behalf of inventor who refused to sign 
or cannot be reached. 

□ This is the petition required by 37 C.F.R. § 1.47 and the statement 
required by 37 C.F.R. § 1.47 Is also attached. See item 13 below 
for fee. 

□ Not Enclosed. 

NOTE: Wliere the filing is a completion in the U.S, of an International Application or where the completion of 
the U.S. application contains subject matter In addition to the International Application, the application 
may be tmated as a continuation or continuation-in-part, as the case may be, utilizing ADDED PAGE 
FOR NEW APPLICATION TRANSMTTTAd, WHERE BENEFff OF PRIOR U.S. APPUCAVON CLAIMED, 

□ Application is made by a person authorized under 37 C.F.R. § 1.41(c) on 
behalf of all the above named invenlor(s). 

(The declaration or oath, along with the sumharge required by 37 CF.R, § 1.16(e) 

can be fifed subsequently), 

□ Showing that the filing is authorized. 

(not required unless called into question, 37 CF.R, § h41(d)) 
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6, Inventorship Statement 

WARNiNQ: If the narrted inventors are each not the inyentors of aif the claims an explanation, including the 
ownership of the various claims at the time the last claimed invention was made, should be 
submitted. 

The inventorship for all the claims in this appiicalion are: 

□ The same. 

or 

□ Not the same. An explanalion, including Ihe ownership of the various claims at 
the lime the last claimed invention was made, 

□ is submitted. 

□ will be submitted. 

7, Language 

NOTE: An application including a signed oath or declaration may be filed in a language other than English. 
An English translation of (he non-English language application and the processing fee of $130,00 
required by 37 C.F.R. § t17(k) is required to be filed with the application, or within such time as may 
be set by the Office. 37 C.F.R. § 1.52(d). 

DJ English 

□ Non-English 

□ The attached translation includes a statement that the translation Is accu- 
rate. 37 C.F.R. § 1.52(d). 

8, Assignment 

fSi An assignment of the inventfon to Nokia Mobile Phones Ltd. 



a is attached. A separate ^ "COVER SHEET FOR ASSIGNMENT (DOCU- 
MENT) ACCOMPANYING NEW PATENT APPLICATION** or □ FORM PTO 
1595 Is also attached. 

□ will follow. 

NOTE: "If an assignment is submitted with a new application, send two separate tetters-one for the appficaVton 
and one for ihe assignment," Notice of May 4, 1990 (1114 O.G. 77-78), 

WAf^NfNQ: A newly executed "CERVFICATE UNDER 37 C.F.R. § 3. 73(b)'' must be Wed when a continuation- 
in-part application is fifed by an assignee. Notice of April 30, 1993, 1150 O.G. 62-64. 
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9. Certiftod Copy 

Certified copy{les) of app!lcation(s) 



Country 


Appln. No. 


Filed 


Finland 


982651 


8 December 1998 


Country 


Appln. No. 


Filed 


Country 


Appin. No. 


Filed 



from which priority is claimed 
Ei Is (are) attached. 
□ will follow. 

NOTH; The foreign eppiicatlon forming the bash for the dalm for priority must be refened to in the oath or 
cfeclarsVon. 37 C.ER, § 1,S5(e} and 1,63. 

NOTE: Vils Item Is for any foreign priority for which the appllcaUon being filed directly relates. If any parent 
US. application or Internationa! Application from which this application claims benefit under 35 U.S.C. 
§ 120 Is Itself entitled to priority from a prior foreign eppltcation, then complete Item IB on the ADDED 
PAGES FOR NEW APPLICATION TBANSMrfTAL WHERE BENEFIT OF PRIOR US. APPLICAVON(S) 
CLAiMED, 

10. Fee CalcuIaUon {37 C.F.R. § 1.16) 
A. Kl Regular application 



CLAIMS AS FILED 



Number filed Number Extra 




Rate 


Basic Fee 
37 C.F.R. §1, 16(a) 
$760.00 


Total 

Claims (37 C.F.R. 

§ 1.16(c)) 11 - 20 = 0 


X 


$ 18.00 


0 


Independent 
Claims (37 C.F.R. 

§ 1.16(b)) 1 - 3 - 0 


X 


$ 78,00 


0 


Multiple dependent ciaim{s). 
If any (37 C.F.R. § 1.16(d)) 




$260.00 





□ Amendment cancelling extra claims Is enclosed. 

□ Amendment deleting multiple-dependencies is enclosed. 

□ Fee for extra claims is not being paid at this time. 

NOTE: If the fees for extra claims are not paid on filing they must be paid or tiie claims cancelled by amendment, 
prior to the expiration of the time period set for response by the Patent and Trademari< Office In any 
notice of fee deficiency, 37 CF.R § 1,16(d}, 

Filing Fee Calculation $ 

B. □ Design application 

($310.00—37 C.F.R. § 1.16(0) 

Fiiing Fee Calculation $ 

C. □ Plant application 

($480.00—37 C.F.R. § 1.16(g)) 

Fiiing fee calculation $ 
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11. Small Enllly StalGmonUs) 

□ Stalemenl(s) that this is a filing by a small enlily under 37 C.F.R. § 1 .9 and 1 .27 
is (are) attached. 

WARNING: "Status as a smafi entity must lye specincaUy esiablislmd in each appticsthn or patent in which 
the status is avettable and desired. Status as a small entity in one applicGtlon or patent does not 
affect any other eppfication or patent, including applications or patents which are directly or 
indirectly dependent upon the epptication or patent in which the status has been established. The 
re fifing of an eppfication under § 1,53 as a continuation, division, or continuation-in-part (mduding 
a continued prosecution appficsilon under § 1.53(d)}, or the filing of a reissue application requires 
a new determination as to continued entitlement to small entity status for the continuing or reissue 
application. A nonprovislonal application claiming benefit under 35 U.S.C. § 119(e}, 120, 121, or 
365(c) of a pdor application, or a reissue application may rely on a statement filed in the prior 
application or in the patent if the nonprovislonal application or the reissue application includes a 
reference to the statement in the prior application or In the patent or includes a copy of the 
statement in tfie prior application or In the patent and status as a small entity Is still proper and 
desired. The payment of the small entity basic statutory ftling fee will be treated as such a reference 
for purposes of this section.' 37 C.F.R § 1.28(a)(2). 

WARNING: "Small entity status must not bo established when Uw person or persons signing the . . , statement 
can unequhocaify make the required self-ceriincaUon.' M.P.E.P., § 509.03, 60} ed., rev. 2, July 
1996 (emfyt)8s}s added). 

(complete the following, if applicable) 

□ Status as a small entity was claimed In prior application 

/ , filed on , from which benefit 

is being claimed for this application under: 

35 U.S.C. § □ 119(e). 

□ 120, 

□ 121, 

□ 365(c), 

and which status as a small entity is still proper and desired, 
□ A copy of the statement in the prior application Is included. 
Filing Fee Calculation (50% of A, B or C above) 

$ 

/VOrE* Any excess of the full fee paid will be refunded if small entitiy status Is established and a refund request 
are fifed within 2 months of the date of timely payment of a full fee. The two-month period is not 
extendable under § 1.136. 37 C.F.R § 1.28(a). 

12. Request for IntemaUonal-Type Search (37 C.F.R. § 1.104(d)) 

(complete, If applicable) 

□ Please prepare an international-type search report for this application at the time 
when national examination on the merits lakes place. 
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13. Feo Payment Being Made at This Time 

□ Not Enclosed 

□ No filing fee is to be paid at this time. 

(This and the surcharge required by 37 C.F,R. § 1.16(e) can be paid 
subsequently,) 
H Enclosed 

^ , ^ 760.00 

(3 Filing fee * 

Recording assignment 

($40.00; 37 C.F.R. § 1.21(h)) 

(See attached "COVER SHEET FOR 

ASSIGNMENT ACCOMPANYING NEW 

APPLICATION\) $ -^^^^22 

□ Petition fee for filing by other than ail the 
inventors or person on behalf of the inventor 
where inventor refused to sign or cannot be 
reacf led 

($130.00; 37 C.F.R. §§ 1.47 and 1.17(1)) $ 

□ For processing an application with a 
specification in 

a non-English language 

($130.00; 37 C.F.R. §§ 1.52(d) and 1.17(k)) $ 

□ Processing and retention fee 

($130.00; 37 C.F.R. §§ 1.53(d) and 1.21(0) $ 

□ Fee for intematlonai-type search report 

($40.00; 37 C.F.R. § 1.21(e)) $ 

NOTE; 37 C.F.R, § 1.21(f) establishes a fee for pfxxessing and retaining any application that is abandoned for 
faiiing to complete the application pursuant to 37 C.F.R. § 1,53(f) and this, as wait as the changes to 
37 C.F,R. §§ 1.53 and 1.7B(aX1}, indicate that in order to obtain the bonofrf of a prior U.S. appfication, 
either the bas/c filing fee must be paid, or the processing and retention fee of § 1.21(1} must be paid, 
within 1 year from noiiftcation under § 53(0- 

Total fees enclosed $ — ^^^'^^ 

14. Method of Payment of Fees 

H Check in the amount of $ ^^^^ 



□ Charge Account No. in the amount of 

$ 

A duplicate of this transmittal is attached. 

NOTH; Fees should be itemized in such a manner that it is dear for which purpose the fees are paid. 37 C.F.R. 
§ 1.22(b). 
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15. Aulhorizatlon to Charge Additional Fees 
WMNfNQ: if no fees are to be paid on ftling, the foflowing items should not be completed. 
WAHNiNQ: Accuretefy count daims, espedafly muWpfe dependent daims, to avoid unexpected high charges, 
if extra daim charges are auihoriied. 

(xl The Commissioner is hereby authorized to charge the following additional fees 
by this paper and during the entire pendency of this application to Account No. 
16-1350 : 

U 37 C.F.R. § 1.16(a), (f) or (g) (filing fees) 
O 37 C.F.R, § 1.16(b), (c) and (d) (presentation of extra claims) 
NOTE* Because additional fees for excess or multiple dependent claims not paid on Wing or on later presentation 
must only be paid or these claims cancelled by amendment prior to the expiration of the time period 
set for response by the PTO in any notice of fee deficiency (37 C.F.H, § /. 16(d)h it might be best not 
to authorize the PTO to charge additional daim fees, except possityly when dealing with amendments 
after ftnal action, 

H 37 C.F.R. § 1 .16(e) (surcharge for filing the basic filing fee and/or declaration 

on a dale later than the filing date of the application) 
H 37 C.F.R. § 1.17(a)(1H5) (extension fees pursuant to § 1.136(a)). 

□ 37 C.F.R. § 1.17 (application processing fees) 

. .A written request may be submitted in an application that is an authonzetion to treat any concunent 
or future reply, requiring a petition for an extension of time under this paragraph for its timely submission, 
as incorporating a petition for extension of time for the appropriate length of time. An authorization to 
charge all required fees, fees under § 1,17, or ail required extension of time fees will be treated as a 
constructive petition for an extension of time in any concument or future reply requiring a petition for 
an extension of time under this paragraph for its timely submission. Submission of the fee set forth in 
§ 1.17(a) will also be treated as a construcOve petition for an extension of Vme in any concunent reply 
requiring a petition for an extension of time under this paragraph for its timely submission.' 37 C.F.R, 
§ 1.136(aX3). 

□ 37 C.F.R. § 1.18 (issue fee at or before mailing of Notice of Allowance, 
pursuant to 37 C.F.R. § 1.311(b)) 

Where an authorization to charge the issue fee to a deposit account has been filed before the mailing 
of B NoUce of Mowance, ttm Issue fee will be automatically charged to the deposit account at the time 
of mailing the notice of allowance. 37 C.F.R, § 1,3 11(b), 

37 C.F.R. § 1.2e(b) requires 'Notification of any change In status resulting In loss of entitlement to smail 
entity status must be Wed in f/?e application . . . prior to paying, or at the time of paying, . . . (/w issue 
fee, . . • From the wording of 37 C.F.R, § 1.28(b), (a) notification of change of status must be made 
even if the fee is paid as 'other than a small entity'' and (b) no notification Is required if the change 
is to another small entity. 



NOTE: 



NOTB: 



NOTE: 
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16. instmctions as to Overpayment 

NOTE: . . Amounts of twenty-fivo dotfars or less wltt not be returned un/ess spedficaily requested within 
a reasonabfe time, nor will the payer be notified of such amounts; amounts over twenty-ftre dottars may 
be returned by check or, If requested, by credit to a deposit account,' 37 § 1.26(a). 

ID Credit Account No. 16-1350 

□ Refund 



5END ALL CORRESPONDENCE TO: 



Reg. No. 24.622 



SIGNATURE OF PRACTItlONEl 
Clarence A. Green 




Tel. No, ( 203 ) 259-1800 



[type or print name of attorney) 
PERMAN & GREEN, LLP 



P.O. Address 



Customer No, 



425 Post Road, Fairfield, Connecticut 06430 



(New Applicatfon Transmittal 14-1}— page 10 of 11) 



Incorporation by reference of added pages 

(check the following item If the application In this transmittal claims the benefit of 
prior U.S. appllcation(s) (including an international application entering the U.S, 
stage as a continuation, divisional or C-l-P application) and complete and attach 
the ADDED PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFIT OF 
PRIOR U.S. APPLICATION(S) CLAIMED) 

□ Plus Added Pages for New Applicalion TransmiUal Where Benefit of Prior U.S. 
Appllcalion(s) Claimed 

Number of pages added 



□ Plus Added Pages for Papers Referred to in Hem 4 Above 

Number of pages added 



□ Plus added pages deleting names of inventor(s) named in prior applicaUon(s) 
wfio is/are no longer inventor(5) of the subject matter claimed in this application. 

Number of pages added 

□ Pius "Assignment Cover Letter Accompanying New Applicalion" 

Number of pages added 

Statement Where No Further Pages Added 

(if no further pages form a part of this Transmittal, then end this Transmittal with 
this page and check the following item) 

5) This transmittal ends with this page. 
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A method for optimizing of data transmission 

TECHNICAL FIELD OF THE INVENTION 

5 The invention is related to optimization of data transmission in TCP/IP networks, 
particularly to problems created by transmission of encrypted traffic. 

BACKGROUND OF THE INVENTION 

10 TCP/IP network technology is presently in widespread use, the Internet being a 
manifest example of a network realized using the Transmission Control Protocol 
(TCP) and Internet Protocol (IP). The IP protocol provides a basic packet data 
transfer mechanism without error checking, acknowledgments or flow control. The 
TCP protocol provides a reliable data transmission mechanism with transmission 

15 eiTor correction, flow control and many other functions. The IP protocol is defined 
in the specification RFC 791, and the TCP protocol is defined in the specification 
RFC 793. An introduction to these protocols is presented in RFC 1180, 

The IP protocol version 4 (IPv4) defined by RFC 791 has a limited address space 
20 due to the source and destination addresses being only 32 bit long. The cuirent 

expansion of the Internet and the development of technology, the address space is 

filling out quickly. Therefore, version 6 of the IP protocol (IPv6) has been designed. 

The addresses in IPv6 are 128 bits long, allowing a vastly larger address space. 

There are also further motivations behind IPv6 and other differences between IPv4 
25 and IPv6. The IPv6 protocol is described in the specification RFC 1883. Some 

details of the TCP and IP protocols relevant to the present invention are described in 

the following with reference to figures 1, 2, and 3. 

In the IP protocol, data is transmitted in so called datagrams, which contain a header 
30 part and a payload data part. Figure 1 shows the structure of an IPv4 header. In the 
following only some of the header fields are described. A detailed description can 
be found from the above mentioned RFC 791. The first field, the four bits long 
version field, contains the version number which for IPv4 is 4. The total length field 
gives the length of the datagram, header and data part combined, as the number of 
35 octets i.e. groups of 8 bits. The source and destination addresses specify the IP 
address of the sender and the intended receiver. Various options can be specified in 
the options field, which may vary in length from datagram to datagram. The number 
of different options specified in the options field may as well vary. The options field 
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is not mandatory, i.e. in some datagrams there may be no options field at all. The 
padding field is used to ensure that the header ends on a 32 bit boundary. The 
padding field is filled with zeroes. After the padding field comes the payload data 
part, whose length can be found out by the recipient of the datagram by subtracting 
5 the length of the header from the value of the total length field. 

Figure 2 illustrates the structure of an IPv6 header. The IPv6 header is simpler than 
the IPv4 header, allowing faster processing of datagrams in transmission nodes. The 
first four bits of the header comprise the version field, which for IPv6 contains the 

10 value 6. The payload length field specifies the length of the data part in octets. The 
next header field specifies the type of any header following this header. The next 
header may for example be a TCP header in case the IP datagram carries a TCP 
packet, or an extension header. The source and destination address fields, each 
consisting of four 32-bit words giving a total of 128 bits for each address, specify 

15 the sender and the intended receiver of the datagram. Instead of an options field, 
inclusion of optional data in the header is provided in IPv6 by so called extension 
headers. Various extension header types are described in RFC 1883. There may be 
zero, one or more than one extension headers in an IPv6 datagram. Each IPv6 
datagram comprises extension headers for only those facilities that the datagram 

20 uses. The extension headers are placed after one another after the main header in a 
chain-like fashion. Each extension header comprises a Next header field. The next 
header field of the main header specifies the type of the first extension header, and 
the next header field of each extension header specifies the type of the following 
extension header. A special value in the next header field specifies that no more 

25 headers follow this specific header. 

Figure 3 illustrates the structure of a TCP header. The most relevant fields are 
described in the following. The other fields in a TCP header are described in the 
above mentioned RFC 793. 

30 

The TCP header indicates a destination port number at the receiving host, to which 
the packet is directed. The TCP protocol makes it possible for many different 
services to exist at a single IP address, by introducing the concept of a port. A 
program can listen to a specific port, and receive any data sent to that port. 
35 Conversely, a program can send a packet to a specific port on a distant host. 
Therefore, the destination port number defines which service or program will 
receive the packet at the host specified by the IP address. Similarly, the source port 
number indicates, which service or program sent the TCP packet. 
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The TCP data octets sent by a host are numbered sequentially. The number of the 
first octet of data in the data part is included in the TCP header in the sequence 
number field. Based on this number, the receiving second host can check whether 

5 TCP packets have arrived through the transmission network in the right order, and if 
any packets are missing. The second host conventionally sends an acknowledgment 
to the first host for each received packet. The acknowledgment message is included 
in a normal TCP packet sent by the second host to the first host. The 
acknowledgment is indicated by the ACK flag and the acknowledgment number. 

10 The acknowledgment number is the sequence number of the next octet, which the 
sender of the packet is expecting to receive from the other end. If there is no other 
data to be sent from the second host to the first host, the payload data part can be 
empty in such an acknowledgment packet. If the second host is transmitting data to 
the first host, the acknowledgment can be indicated in the header of a packet 

15 containing some payload data. Therefore, the ACK messages do not always add 
transmission load. If a host does not receive an acknowledgment for some data 
within a timeout period, the data is retransmitted. 

The data part follows the TCP header. The length of the data part is carried by the IP 
20 protocol, therefore there is no corresponding field in the TCP header. 

TCP is one of the few transport protocols that has its congestion control 
mechanisms. The key congestion control mechanism in TCP is the "slow start" 
mechanism, which functions in the following way. According to the TCP protocol, 

25 the sender starts sending data at a very slow rate, and monitors acknowledgment 
ACK messages from the receiving end to see, if any data is lost. If no data is lost i.e. 
sender always receives an ACK, the TCP sending host increases the data rate. The 
sending increases the data rate, until data is lost, which the sender can observe as 
missing ACK messages. The data loss typically results from the behavior of 

30 intermediate hosts: if an intermediate node cannot forward a data packet due to 
congestion, the node simply discards the packet. The sending host then retransmits 
the packet at a later time, since no ACK message was received from the receiving 
host due to disappearance of the packet. When the sending host notices that ACK 
messages have not been received for a data packet, the sending host decreases the 

35 data rate, until no more data is lost. When each transmitted packet again results in an 
ACK message, the sending host starts increasing the data rate again. Consequently, 
an oscillating behavior results, in which the TCP transmission oscillates with a 
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period of 1 to 2 seconds, and data is lost on one part of the cycle and the capacity of 
the network is not used in an optimum way on the other part of the cycle. 

Recently, a new mechanism for controlling congestion situations in a TCP/IP 
5 network has been presented, for example, in an article entitled "A Simple Fast Flow 
Control for TCP/IP over SateUite ATM Network" by Jian Ma, published in the 
proceedings of the wmATM ^8 conference, 6-10 April 1998, Hangzhou. This 
mechanism, called Fast TCP or FTCP, alleviates the problems of oscillation. In this 
mechanism, when an intermediate node detects a congestion situation, it delays the 
10 ACK messages returning from the receiving end. As a result of ACK messages 
being delayed, the sending host delays the sending of further data packets, which 
reduces congestion. In this way, congestion can be controlled without loss of data. 

Fast TCP is only one example of various control mechanisms which rely on 

15 identification of the contents of IP packets, i.e. identification of TCP messages. 
Another example of such a mechanism is a method described by R. Satyavolu et al 
in ATM Forum Document 98-0152 "Explicit rate conti:ol of TCP applications", 
which utilizes die window value carried in the TCP header for rate control of TCP 
traffic. The main idea of this method is to modify the contents of the window size 

20 field in the TCP header. This method does not 'work if a network element is not able 
to access the encrypted IP payload, identify the original window size, read it and 
communicate the modified value to the TCP source with the IP datagram. Other 
examples concerning conti-ol of TCP traffic have also been proposed by MIT and 
End-to-End Research Group of the Internet Research Task Force respectively in 

25 "An Acknowledgment Bucket Scheme for Regulating TCP Flow over ATM", in 
Globecom 97, Nov. 1997, and "ACK spacing for high delay-bandwith paths with 
insufficient buffering", Internet Draft, July 1997. The ATM Forum document 
ATMF97-758rl entitled "TCP flow control with ACR information", December 
1997, describes an example of using TCP ACKs as a flow control interworking 

30 media. 

Encryption of IP tiaffic is often desirable for security reasons. In encrypted IP 
traffic, all payload data of the IP datagrams is encrypted. Since the TCP header and 
data are carried as payload data in IP datagrams, all TCP header information is 
35 encrypted as well along with TCP data. 

However, IP encryption creates a problem, when any mechanisms relying of 
identification of TCP messages are used. Any mechanisms which rely on the 
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recognition and possible processing of TCP ACK messages require that at least 
some of the intermediate nodes participating in the mechanisms are able to read the 
contents of the IP packets. If the IP traffic is encrypted, the intermediate nodes 
cannot identify the TCP messages. Therefore, the intermediate nodes are unable to 
5 perform the control mechanisms based on TCP ACK messages. 

SUMMARY OF THE INVENTION 

An object of the invention is to realize a method for transmission of encrypted IP 
10 traffic, which allows control of the data transmission based on information earned 
in headers of TCP packets. A further object of the invention is to realize a method 
for transmission of encrypted IP traffic, which allows control and/or processing of 
TCP ACK messages. 

15 The objects are reached by inserting at least an indication of the presence of the 
information on which the control is based into the header of the IP datagram 
carrying the TCP packet. The insertion of said at least an indication may comprise 
placing of at least a copy of the information on which the control is based into the 
header of the IP datagram. 

20 

The method according to the invention is characterized by that, which is specified in 
the characterizing part of the independent method claim. The dependent claims 
describe further advantageous embodiments of the invention. 

25 According to the invention, at least an indication of a TCP ACK or other TCP 
information used as a basis of processing is placed in the IP header of an IP 
datagram, if such information is carried by the IP datagram. The indication may 
simply be a flag indicating the presence of a TCP acknowledgment. The indication 
may also contain the acknowledgment number or other TCP header information, 

30 which allows processing of the encrypted traffic based on the acknowledgment 
number or other TCP header information. In IPv4 datagrams, the indication may be 
inserted as an extra option field. In IPv6 datagrams, the indication may be inserted 
as an extension header. 

35 BRIEF DESCRIPTION OF THE DRAWINGS 

The invention is described in more detail in the following with reference to the 
accompanying drawings, of which 
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Figure 1 illustrates the structure of an IPv4 header, 

Figure 2 illustrates the structure of an IPv6 header, 

5 

Figure 3 illustrates the structure of a TCP header. 

Figure 4 illustrates one advantageous embodiment of the invention, 

10 Figure 5 illustrates the structure of the option code octet of an option field in an 
IPv4 header. 

Figure 6 illustrates the structure of an IPv6 extension header according to an 
embodiment of the invention, and 
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20 



25 



Figure 7 illustrates signalling according to an advantageous embodiment of the 
invention. 

Same reference numerals are used for similar entities in the figures. 
DETAILED DESCRIPTION 

In the following, four groups of embodiments of the invention are described in 
further detail. 

FIRST GROUP OF EMBODIMENTS 



In the first group of embodiments, the source originating the TCP traffic being 
acknowledged performs the decryption of the TCP traffic. In order to allow an 

30 intermediate network element to perform ACK based processing, information about 
ACK messages contained in the received packets are signalled to any such 
intermediate network elements performing ACK based processing. Encrypted IP 
packets are decrypted at the TCP source host, and before conventional TCP 
processing, the ACK information is routed to the entity performing the ACK-based 

35 control or processing. There may be one or more such entities. When there are more 
than one such entities, the ACK information is sent to all of these entities. The entity 
may be an intermediate network element, or a control member within the TCP 
source host. 
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Figure 4 illustrates the configuration in an advantageous embodiment of the 
invention, which embodiment is an example of the first group of embodiments. 
Figure 4 illustrates a source network element 10, an intermediate network element 
5 20 and a destination network element 30 as well as communication links 5 between 
the elements. Figure 4 further illustrates the protocol stacks at each element, in 
which stack the physical layer is lowest, IP layer above the physical layer and the 
TCP layer above the IP layer. According to this embodiment, a further 
communication channel 6 is set up between the source network element 10 and the 
10 intermediate network element 20, which communication channel is used to transmit 
information about ACK messages contained in the received packets. This 
configuration allows the intermediate network element to process the traffic, even 
though the IP traffic is encrypted. 

15 In one advantageous embodiment of the invention, the ACK messages are stored in 
a queue at the source host, and information about the messages is signalled to a 
ACK processing network element. The source host waits for commands from the 
network element before further processing of the queued ACK messages. 

20 In another advantageous embodiment of the invention, any ACK message 
information found in decrypted packets is signalled to a network element and 
subsequently discarded by the source host. In this embodiment, the network element 
inserts the ACK messages in the traffic for example unencrypted. When the source 
host receives unencrypted ACK messages, the source host performs normal ACK 

25 processing. In this embodiment, the source host may comprise an acknowledgment 
message routing unit, which routes the ACK messages found in encrypted packets to 
any intermediate network elements performing ACK based processing, and allows 
ACK messages found in unencrypted packets to be processed in the normal way by 
the source host. 

30 

In a further advantageous embodiment of the invention, the ACK-based processing 
is performed in the source host, which decrypts the encrypted IP traffic. In this 
embodiment, a network element performing ACK processing for unencrypted 
traffic, signals any further information needed for the ACK processing to the source 
35 host in case of encrypted traffic, whereby the source host is able to perform similar 
processing. Said further information may comprise for example information about 
the congestion situation of the network as observed by the network element. 
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SECOND GROUP OF EMBODIMENTS 

The problems associated with ACK processing of encrypted IP traffic can also be 
solved by providing network elements performing the processing with the capability 
5 to decrypt IP packets. In such an embodiment, the network element is able to 
decrypt the IP packets and perform the network control functions, such as FTCP 
processing, in the normal way. Such an embodiment has for example such an 
advantage that no changes are needed in the programs performing TCP and IP 
processing and IP encryption and decryption at either source or destination host. The 

10 actual realization of such an embodiment is naturally dependent on the encryption 
system used for encryption of the IP datagrams. For example, the entity performing 
the encryption may transmit to the network element the decryption key needed for 
the decryption of the IP datagrams. As an another example, the network element 
may be provided with decryption keys for a number of TCP connections, which 

15 connections are processed by the network element. 

THIRD GROUP OF EMBODIMENTS 

The problems associated with ACK processing of encrypted IP traffic can also be 
20 solved by using plain, i.e. unencrypted ACK messages. In such an embodiment, the 
entity performing the encryption of IP datagram payload data leaves such datagrams 
unencrypted, which datagrams contain a TCP ACK message. Other datagrams are 
encrypted in the normal way. This method allows processing of ACK messages by 
intermediate network elements to proceed in the normal way, since the ACK 
25 messages are not encrypted. 

In this embodiment, the TCP destination host is required to produce both encrypted 
and plain IP packets belonging to the same TCP connection, and the TCP source 
host is required to be able to receive both encrypted and plain IP packets, 

30 

Preferably, in this embodiment, TCP ACK messages are sent in otherwise empty 
TCP packets, i.e. no data is sent in those packets containing an ACK message, in 
order to avoid sending payload data unencrypted. 

35 This embodiment has such an advantage, that it does not require additional 
signalling channels, and that more than one network elements can observe the ACK 
messages without special arrangements. Therefore, this embodiment allows easy 
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changes in the network topology, such as increasing the number of intermediate 
network elements. 

FOURTH GROUP OF EMBODIMENTS 

5 

According to a further embodiment of the invention, an indication that a TCP ACK 
message is contained in an encrypted IP datagram is placed in the header of the IP 
datagram. This allows the intermediate network elements to perform processing 
based on the ACK messages despite the fact that the ACK messages themselves are 
10 encrypted. An indication of an ACK message without the ACK number is sufficient 
to such processing, which does not need the ACK number. In another embodiment 
of the invention, also the ACK number is placed in the IP header. This allows 
functioning of such mechanisms, which need the ACK number in some way. For 
example, such mechanisms may then modify the ACK number. 

15 

With IPv4 datagrams, the indication of an ACK message may be incorporated in the 
IP header as an extra option field. The ACK number may as well be incorporated in 
the IP header as an extra option field. The indication of an ACK message and the 
ACK number may be contained in the same option field, or they may be placed in 
20 separate option fields. The invention does not limit the encoding of the indication of 
an ACK message nor the encoding of the ACK number in the extra option field or 
fields in any way. A person skilled in the art can devise many different ways of 
encoding the indication of ACK and the ACK number in an extra option field of an 
IPv4 header. 

25 

The ACK message or an indication of an ACK message can be encoded in many 
ways in an IPv4 header. For example, an indication of an ACK message can be 
included in the Type of Service (TOS) field. The bits 6 and 7 of the TOS field are 
unused according to current IPv4 specifications, whereby one of these two bits 
30 could for example be used to indicate an ACK message. For example, in one 
embodiment of the invention, bit 6 of the TOS field of an IP datagram is set to 1, if 
the IP datagram comprises a TCP ACK message and to 0, if the IP datagram does 
not comprise a TCP ACK message. 

35 In another advantageous embodiment of the invention, the encoding of an ACK 
message is realized by copying at least a part of the TCP header into an option field 
of an IPv4 datagram. Figure 5 illustrates the structure of an option field. An option 
field contains either an option type octet only, or an option type octet, an option 
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length octet and data. The first bit of the option type octet i.e. bit number 0 
indicates, whether the option field should be copied only to the first fragment of an 
IP datagram in such a case, when the IP datagram is fragmented at some point 
during its transmission. If the first bit is set to 0, only the first fragment shall contain 
5 the option field. If the first bit is set to 1, the option field is copied to all fragments. 
Bits 1 and 2, i.e. Option Class bits describe the class of the option. In this example 
of an embodiment, these bits can be set to 0, in which case the option class bits 
indicate that the option class is "control", i.e. contents of the field are associated 
with datagram or network control. The remaining bits of the Option Code octet, i.e. 

10 the Option Number field indicates the use of the option field. For this embodiment 
of the invention, one of the currently unused option numbers should be defined to 
indicate, that the option field contains at least a part of the TCP header carried in the 
IP datagram. For example, option number 15 could be defined to indicate this. The 
meaning of the various values of the Option Class bits and the Option Number bits 

15 are defined in the previously mentioned specification RFC 791. The option length 
octet indicates the length of the whole option field in octets. The data part of the 
option field contains the actual data of the option field. Preferably, in this 
embodiment the data part comprises at least the TCP acknowledgement number. 
The data part may also comprise a whole TCP header. 

20 

In an advantageous embodiment of the invention, the existence of an option field 
containing a TCP header is used as an indication of a TCP ACK or other TCP 
information. 

25 In an advantageous embodiment of the invention, an indication of an ACK message 
may be incorporated in an IPv6 datagram as an extension header. The ACK number 
may as well be incorporated as an extension header, and the indication and the ACK 
number may be incorporated in the same extension header or as separate extension 
headers. According to this embodiment of the invention, a new extension header 

30 type needs to be defined, i.e. a type specifying that the extension header contains at 
least a part of a TCP header. In the following, such an extension header is called the 
TCP extension header. 

The TCP extension header can be inserted for example before the Authentication 
35 and Encapsulation security payload (ESP) extension headers in an IPv6 datagram. 

Figure 6 illustrates an example of the structure of a TCP extension header according 
to an advantageous embodiment of the invention. In this embodiment, the TCP 
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extension header contains a Next header field specifying the type of the next header, 
a Length field specifying the length of the extension header in 8-octet units, the TCP 
header or at least a part of it, and possibly padding to fill up any remaining space 
until the length of the extension header is a multiple of 8-octet units as required by 
5 RFC 1883. The padding may be realized for example in the way described in section 
4.2 of RFC 1883, i.e. by using a single octet of zeroes when only one octet of 
padding is needed, and by using a single octet of ones, an octet specifying padding 
length minus two, and N-2 octets of zeroes, when N octets of padding are needed. 

10 Preferably, the entity which performs the encryption of IP datagrams performs the 
incorporation of the indication of an ACK message in the IP header. The entity 
performing the incorporation is preferably the TCP destination host, which creates 
the ACK messages. 

15 However, the invention is not liihited to incorporation of an indication of an ACK 
message in the TCP destination host. For example, the TCP destination host 
encrypting the IP datagrams may communicate information to a further processing 
entity, the information indicating which IP datagrams contain an ACK message, and 
the associated ACK numbers. The further processing entity may then add an 

20 indication of an ACK message and possib'ly also the ACK number to those 
encrypted IP datagrams, which are pointed out by the TCP destination host as 
containing an ACK message. Therefore, the process of incorporation of an 
indication of an ACK message does not need to be performed by the same entity 
performing the IP encryption. 

25 

Incorporation of an indication of an ACK message into the IP header has for 
example such an advantage, that the TCP source host programs performing the IP 
decryption and TCP processing do not necessarily need to be changed. The source 
host can simply ignore the indication of the ACK message. In such embodiments of 
30 the invention, where the ACK number is also incorporated in the IP header and 
various processing mechanisms in the intermediate nodes may modify the ACK 
number, conventional TCP source host programs do need to be modified to the 
degree, that the programs use the modified ACK number from the IP header and not 
the unchanged ACK number from the decrypted TCP packet. 

35 

Incorporation of an indication of an ACK message into the IP header has for 
example also such an advantage, that no TCP payload data needs to be sent without 
encryption, even if a TCP packet contains both an ACK message and payload data. 
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Figure 7 shows one example of signalling according to one embodiment belonging 
to the fourth group of embodiments. Figure 7 shows signalling between a source 
host 10, a network element 20 and a destination host 30. First, the source host 10 
5 sends 100 a packet to the network element 20, which forwards 1 10 the packet to the 
destination host 30. The destination host then encrypts a datagram for transmission 
back to the source host. In this case, the TCP packet in the datagram contains an 
acknowledgment, wherefore the destination host inserts 115 an indication of the 
ACK message in the header of the encrypted IP packet. After preparation of the 

10 packet with the acknowledgment, the destination host sends 120 the packet to the 
network element 20. The network element observes from the IP header that the 
packet contains an ACK message. In this example, the network is congested at this 
time, wherefore the network element delays 130 the datagram containing the ACK. 
When the congestion has eased enough, the network element forwards 140 the 

15 datagram to the source host. Figure 7 shows also a further example of signalling in 
case of no congestion. The source host 10 sends 150 a packet to the network 
element 20, which forwards 160 the packet to the destination host 30. The 
destination host then encrypts a datagram for transmission back to the source host. 
In this case, the TCP packet in the datagram contains an acknowledgment, 

20 wherefore the destination host inserts 165 an indication of the ACK message in the 
header of the encrypted IP packet. After preparation of the packet with the 
acknowledgment, the destination host sends 170 the packet to the network element 
20. In this case, the network is not congested, whereby the network element simply 
forwards 180 the packet to the source host. The detection of congestion may be 

25 performed for example on the basis of packet delays, delays of acknowledgment 
messages or by any other method known to a person skilled in the art. 

In this specification, the term encrypted IP datagram refers to an IP datagram, whose 
data payload is encrypted at least in part. 

30 

The present invention can advantageously be used in connection with previously 
described fast TCP mechanism. However, the invention is not limited to such an 
embodiment. The invention can advantageously also be used in connection with 
other mechanisms, which process TCP traffic based on TCP header information, 
35 such as window size or acknowledgment messages. Therefore, the previous 
examples of ACK processing do not limit the invention in any way. In various 
embodiments of the invention, similar processing can be based on for example the 
window size value instead of the ACK number. 
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In view of the foregoing description it will be evident to a person skilled in the art 
that various modifications may be made within the scope of the invention. While a 
preferred embodiment of the invention has been described in detail, it should be 
apparent that many modifications and variations thereto are possible, all of which 
fall within the true spirit and scope of the invention. 
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Claims 

1. Method for processing IP traffic based on information within TCP headers carried 
in IP datagrams, in which traffic at least some of the IP datagrams are encrypted, 
5 characterized in that 

if an IP datagram to be encrypted contains TCP header information used as a basis 
for the processing, at least an indication of the information on which the processing 
is based is placed into the header of said datagram. 

10 2. A method according to claim 1, characterized in that 

if an IP datagram to be encrypted contains a TCP acknowledgment, an indication of 
the acknowledgment is placed into the header of said datagram. 

3. A method according to claim 1, characterized in that 

15 said placing of at least an indication into the header of said datagram comprises 
placing a copy of at least the information on which the processing is based into the 
header of said datagram. 

4. A method according to claim 3, characterized in that 

20 said placing of at least an indication into the header of said datagram comprises 
placing of all information of a TCP header into the header of said datagram. 

5. A method according to claim 3, characterized in that 

a copy of a TCP acknowledgment number is placed into the header of said 
25 datagram. 

6. A method according to claim 3, characterized in that 

a copy of the contents of the window size field of a TCP header is placed into the 
header of said datagram. 

30 

7. A method according to claim 1, characterized in that 

if said datagram is an IPv4 datagram, said at least an indication is placed in an 
options field of said datagram. 

35 8. A method according to claim 1, characterized in that 

if said datagram is an IPv6 datagram, said at least an indication is placed in an 
extension header in said datagram. 
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9. A method according to claim 3, in which method 

- a source network element generates IP datagrams, 

- an intermediate network element forwards the IP datagrams to a destination 
network element, and 

5 - the destination network element receives the IP datagrams, 
characterized in that 

the intermediate network element modifies said copy of the information on which 
the processing is based. 

10 10. A method according to claim 9, characterized in that 

said destination network element uses said modified copy of the information instead 
of the encrypted version of the information carried as the payload of the IP 
datagram. 

15 1 1 . A method according to claim 1 , being used in congestion control in a TCP/IP 
network, characterized in that 

the method comprises the step of delaying the transmission of an encrypted IP 
datagram by a network element, if said encrypted IP datagram comprises an 
indication of a TCP acknowledgment and if said network element detects 
20 congestion in the network. 
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ABSTRACT 



The invention is related to optimization of data 
transmission in TCP/IP networks, particularly to problems 
created by transmission of encrypted traffic. According to 
the invention, an indication of a TCP ACK being carried in 
the encrypted payload of a IP datagram is added in the IP 
header of the datagram. The indication may simply be a 
flag indicating the presence of a TCP acknowledgment. The 
indication may also contain the acknowledgment number, 
which allows processing of the encrypted traffic based on 
the acknowledgment number. In IPv4 datagrams, the 
indication may be inserted as an extra option field. In IPv6 
datagrams, the indication may be inserted as an extension 
header. 
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Attoniey's Docket No._ PATENT 



COMBINED DECLARATION AND POWER OF ATTORNEY 
(ORIGINAL, DESIGN, NATIONAL STAGE OF PCT, SUPPLEMENTAL, 
DIVISIONAL, CONTINUATION OR C-I-P) 

As a below named inventor, 1 hjercby declare timt: 

TYPE OF DECLARATION 
This declaraaon is of the foIlowj:ng type: 

(check one applicable item bmloyv) 

_ design. 

suppl&menta]. 

NOTE. If iht declaration is tot zn IniEmaDonal AppIicaiioR being liied as a divisional, continuaiiQTi or conmutxtiou-in^pisit 
applicaiicn. do ng^ check next item; check appropdate one of last sthree items. 
_ nadonal stage of PCT. 

NOTE: If one of t3ic foIlowiD^ 3 items apply, thni complceo find also attach ADDED PAGES FOR DIVISIONAL, 
CONTINUATION OR C-I-P. 

divisional 

, continuation. 

continuation-in-part (C-I-P). 

iNVEisrroRSfflP identipication 

WARNING: If ttifi mveniors arc c^di not the inventors Of all liie claims, an o^^^ including ihe 

ovi'ncnhip o^ all the claims at the Timt* the last claimed invention was made, shoCiMhe submitted. 

My residence, post office address and citizenship are as stated below, next to my name. I b&li<jve chat I 
am the original, and sole inventor (if only one name is listed below) or an original first and joint 
inventor (if plural nam&s are lisied below) of the subject matter that is claimed, and for which a patent 
is sought on the invention entitled; 

title OF INVENTION 
A melhod for optiini2U3^ of data trattsmissiott 
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SPECmCATlON IDENTIFICATION 

ihe specification of which; 

(complete (a), (b) or (c)) 

(a) X is attached hereto. 

(b) was filed on ... t as _ Serial No, 0 L — - 

or Express Mail No., as Serial No, not yet known — 

and was amended on_„ JIf applicable). 

iVOTE, Amendments tiled after th£ original papers arc deposited with &c PTO chat concair\ new maiter are not acc&rded a 
filing dat« by being rofen-ed to in Ehe declsjajdont Accordingly, the amendments involved arc those filed wim the 
applicarion papers or, in chc ca^e of a supplememal declaniiioii, are those amendiaeats claiiaiiig xaswccr aot 
encompassed in the original staiement of invenhon or claims. Set 37 CFR 1.67. 

(c) was described and claimed in PCT Intcroattonal Application No. ^ , filed on 

and as amended under PCT Article 19 on (if any), 

ACKNOWLEDGEMENT OF HEVIEW OF PAPOERS AND DUTY OF CANDOR 

I hereby state ibat I have reviewed and mideistand the contents of the above-idendlied specification, 
including the claims, as amended by any amendment referred to above. 

I acknowledge the dnty to disclose inforasation, which is material to patentability as defmcd In 31, 
Code of Federal Regulations, § 1.56, 

(also check ike following items, if desired) 

X and which is tnatedai to the examination of this application, namely, infomiation where there 
is a substantial likelihood that a reasonable Examiner would consider it ionporunc in 
deciding whether to allow the application to issue as a patent, and 

ia compliance with this duty, (here is attached an informadon disclosure statement, in 

accordance with 37 CFR 1.98. 
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PRIORITY CLAIM (35 U.S.C § 119(aHd)) 

I hweby ciaim foreign priority benefits under fide 35. United States Code, § 1 19(aKd) of any foieign 
applicaaon(s) for patent or invemor's certificate or of any PCT intematSonal application(s) designating 
at least one country other than the United States of America listed below and have also identtfled below 
any foreign applkation(s) for patent or invenior*s certificate or any PCT international appUcation(s) 
designating at least one country other than the United States of America filed by inc on the same 
subject matter having a fxling date before that of the applicadoa(s) of which priority is claimed. 



(complete (d) or (e)) 

(d) no such applications have been filed. 

(e) 2C such applicationjs have been filed as follows. 

NOTE. Where item (c) is wiicred above and rhc IntemacioTiai Appiicaiion wMch deslgnatfcd the U,S itself claimed pricfiicy 
check item (e)» enter the de.mh belo^v snd make Ckt pricofity daim. 

PRIOR FOREIGN/PCT APPLICATIONS) FILED WITfflN 12 MONTHS 
(6 MONTHS FOR DESIGN) PRIOR TO THIS APMLICAWON 
AND ANY PRIORITY CLAIMS XJlSnOER 35 U5.C. § 119(a)-(d) 



COUNTRY(OR 
INDICATE IF PCT) 


APPLICATION NUMBER 


DATE OF FILING 
(dav, month, year) 


PBIORrrY CLAIMED 
UNDER 37 use 119 


Froland 


982651 


8 Decearibear 1998 


2;yES 


NO 








^YES , 


NO— 








YES 


NO_ 








_YES 


N0_ 








_YES 


NO_ 



CLAXM FOR BENEFIT OF PRIOR U.S, PROVISIONAL APPUCATION(S) 

(34 UJS.C. § 119(e)) 



I hereby clam the benefit under Title 35, United States Code, § 119(e) of any United 
States provisional application(s) listed below; 

PROVISIONAL APPUCAHON NUMBER EDJNG DATE 

/. ^ ^ 

/ 

/ . — 
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CLAIM FOR BENEFIT OF EARLIER US/PCT APPLICATION(S) 
UNDER 35 US-C 120 

_ The claim for the benefit of any such applications are set forth in the attached 

ADDED PAGES TO COMBINED DECLARATION AND POWER OF ATTORNEY 
FOR DIVISIONAL, CONTnWATION OR CONTINUATION-IN PART (C^I-P) 

APPLICATION, 



ALL FOREIGN APPLICATIONCS), IFANYy FILED MORE THAN 12 MONTHS 
(6 MONTHS FOR DESIGN) PRIOR TO THIS VS. APPUCATION 



Wre, If the application filed mw« than 12 msmUhs torn Eha Sing date of this application is a PCX filing fioimmg the basis 
fco: Ohs application emaring the United Stares as (1) the national stage, or (2) a concinuaiioft, divisional, or 
conoivuaiion^in.part, then alio complete ADDED PAGES TO COMBINED DECLARATION AM) POWER OF 
ATTORNEY FOR DIVISIONAL, CONTINUATION OR OU? APPUCATION fox benefit of to prior U.S. or PCT 
appUcalion(s) under 35 U-SX. § 120. 

POWER OF ATTORNEY 

I hereby appoint the following attomey(s) and/or agent(s) to prosecute this application and transact all 
business in the Patent and Traderoark Office connected ifaerewiih. 

(list nmm and registration number) 

Qaience A. Green (24,622) 
Harry R Smith (32,493) 
Mark F. Harrington (31,6S6) 

(check tkt Jbllawing item, if applicable) 

Attached, as part of this declaration and power of attorney, is the authorization of the 

above-named afctoniey(s) to accept and follow instmciions froEQ my represenrat3ve(s). 

SEND CORKESPONDENOB TO DIRECT TELEPHONE CALLS TO: 
(Name and telephone number) 
ClareTice A, Green Qarejico A. Green 
Pennan& Green 203-259-1800 
425 Post Road 
Fairfield, Ct 06430 
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DECLARATION 

I hereby declare chat all stateinents made herein of my own fcnowladge are true and that all statements 
made on informaiioti and belief are bdieved to be true; and further that these statements were made 
ym± the knowledge that wilful false statements and the like so made are punishable by fme or 
imprisonment, or both, nnder Section 1001 of Tide 18 of the United States Code, ^nd that such wilM 
false statements may jeopardize the validity of the application (X any patent issued thereon, 

SIGNATURE{S) 

NOTE: Carefaily indicate cb« family (or last) nsttoe, as it should appear on ^ Sliag receipt all ocher documeats. 

F dl name of sole or first invrntort 

Gf ven name: Jussi 

Middle initial or name: 

Family (or last name): RUUTU 



Inventor's sigMture: 
Date: 

Country of Citizenship: 

Residence: 

Post Office Address: 



Finland - 
Uudenlcaupungindo 14, mi 00250 IIELSS^rFadanA tLL^s^%'^u ^hH,^i^^o%iro 



Given name; Jian 
Middle initial or nam©: 

Family (or last name); ^ Ma ^ ^^^^'Xj 

Inventor's signature: , , . 

Date: 2-^.1?. 

Country of Citizenship: Finland 

Residence: Pihlajamajjantie 13-lS C 1, FIN-02940 ESPOO, Finland 

Pose Office Address: Khlajamasjantie 13-15 C 1, FIN-02940 ESPOO, Finland 



Full name of third Joint invetztor. If any: 

Given name: 

Middle iaitial or name: 

Family (or last name): 

Inventor's signature: 

Date: 

Country of Citizenship: 

Residence: 

Post Office Address: 
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S. 



(check proper box(es}for any of the following <uidedpage(s} 
that form a pan of this declaration) 

Signature for fourth and subsequent joint inventors. Number of pages added — 



. Sigaaturc by adiiuiiistrator(trix), fixccutGr(tiix) or Iftgal r^eseacative for deceased or 
incapacitated inventor. Number of pages added , 



. Signature for inventor who refuses to sign or cannot be reached by person autlioiized 
under 37 CFR L47. Number of pages added . 



Added page for signature by one joint invcantor on behalf of deceased taventor(s) where 
legal representative cannot be appointed in time. (37 C3FR 1*47) 



Added pages to combined declaration and power of attorney for divisional, continuation* 
or continuation-in-pan (D-I-P) application. 

Number of pages 



Authorization of attoniey(s) to accept and follow instmctions from representative. 



(if no further pages farm apart ofthU Declaration, 
then end this Declaration wth this page and check the following item)' 
X This declaration ends with this page. 
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